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METHOD AND SYSTEM FOR CONTROLLING ACCESS 

TO CONTENT 

BACKGROUND 

1. Technical Field 

[0001] The present invention relates to controlling access or consumption of content. 

2. Art Background 

[0002] In developing telecommunications networks, the amount of offered content can be 
substantial. In that context, minors can easily become subjected to inappropriate or unsuitable 
content. Further, mobile terminals are typically personal and individual devices. An approach is 
needed to control content consumption in both of the situations described above. 

[0003] Furthermore, as more content becomes available, issues of Digital Rights 
Management (DRM) and parental control have become increasingly important. DRM may be 
used to protect content from unauthorized copying, and may include a mechanism referred to as 
watermarking that identifies the owner of the content. With electronic content, digital 
watermarking may be performed by inserting a pattern of bits into a digital image, audio or video 
file that identifies the file's copyright information (author, rights, etc.). One purpose of digital 
watermarks is to provide copyright protection for intellectual property in digital format. Digital 
watermarks may be designed to be completely invisible, or in the case of audio clips, inaudible. 
Moreover, the actual bits representing the watermark may be scattered throughout a file in such a 
way to prevent unwanted identification and manipulation thereof. An approach is also needed to 
facilitate control over access and consumption of content while protecting the rights of the 
content owners. 



SUMMARY 

[0004] A system, method and computer program is provided to control user access, by 
one or more users each having associated therewith a wireless communications device, to content 
receivable or received across a communications medium. The system, method and computer 
program perform a detection of a presence of one or more users in at least one region in which 
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the receivable content may be consumed via the one or more users' wireless communications 
devices by wireless communications, and a determination of access rights to content based on the 
detected one or more users, the access rights defining a suitability or unsuitability of one or more 
users to consume content. Access or consumption of receivable content by the one or more 
detected users may be selectively controlled according to at least one of the determined access 
rights and access rating of receivable content. The region may be defined by a communications 
range of the receiver terminal or a range of vicinity of outputted content. 

[0005] The wireless communications may include Bluetooth, RFID or involve 
communications via WLAN and WPAN. 

[0006] The receivable content may be broadcasted or multicasted by one or more content 
providers or managers for receipt by the receiver terminal, such as a set top box or a wireless 
user terminal. For example, the receivable content may be provided across the communications 
medium by digital video broadcasting to the receiver terminal or time-slicing communications 
protocols. 

[0007] A presence of one or more users may be detected through detection of a location 
of a user's communications device and determining whether the user's communications device is 
within the region. 

[0008] The determined access rights may be determined according to at least an access 
rights level of at least one detected user. The access rights level enables determination of a 
suitability or unsuitability of particular content or content-types for consumption by the user. 
The access rights level may indicate one of a maturity of a user, suitable content type, and 
unsuitable content-type; may be a highest or lowest access rights level of the detected users; or 
may be based on a combination of access rights levels of the detected users. The access rights 
level of a user may be received from the user's communications device, or retrieved from a local 
or remote storage facility. 

[0009] Access or consumption of receivable content by one or more detected users may 
be selectively controlled according to at least one of the determined access rights and access 
rating of receivable content. This may involve filtering received content for output by the 
receiver terminal to restrict or allow access or consumption of received content according to the 
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determined access rights or filtering a content guide (such as a broadcast program guide) 
indicating content or content-types receivable by the receiver terminal. The content guide may 
be received from a remote location. 

[0010] The content guide may include one or more items indicating receivable content or 
content-type, the items being configured in a hierarchical parent-child structure in which an 
access rating of a child item can not exceed an access rating of an associated parent item. In this 
example, the filtering of the content guide may involve preventing or abstaining from processing 
of an unsuitable item and any associated child items of the content guide based on the 
determined access rights. 

[0011] Access control may further include controlling searching or selection of content 
or content-type by a user based on the determined access rights, or controlling receipt of content 
from the receivable content by the receiver terminal based on the determined access rights. 
Receipt control may involve abstaining from receiving data burst of content determined 
unsuitable for access or consumption based on the determined access rights, e.g., powering down 
at least content receiving components of the receiver terminal during data bursts (or time-slice 
transmission) of content determined unsuitable. 

[0012] Receivable content may include an electronic watermark indicating an access 
rating for the content. 

[0013] The determined access rights may further be determined for a period of time or 
dynamically updated. This dynamic implementation may involve determining a new access 
rights upon a triggering event comprising one of detection of a new user, detection of a user 
leaving the region, detection of a powering down of the wireless communications device of a 
detected user, and detection of a change in an access rights profile set on the wireless 
communications device of a detected user. Access or consumption control for receivable content 
may then be dynamically updated according to the updated or newly determined access rights. 

[0014] In another aspect, a system, method and computer program is provided to control 
user access to content receivable by a terminal across a communications medium. This 
implementation may involve maintaining a content guide including at least items identifying or 
classifying content or content-types receivable by (or available to or offered to) a terminal for 
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consumption and access rating for receivable (or available or offered) content, the items of the 
content guide being arranged in a parent-child hierarchical structure having a hierarchy rule in 
which an access rating of a child item does not exceed an access rating of a corresponding parent 
item; and providing the content guide to the terminal. The content guide may be provided via 
broadcasting the content guide from a content provider. The content guide may include 
information concerning available programs and transmission times of the programs, and may be 
an Electronic Program Guide (EPG) or an Electronic Service Guide (ESG). This implementation 
may further involve receiving information for updating a content guide; determining whether the 
update complies with the hierarchy rule; and allowing or restricting the update based on the 
determination. The term "receivable" may also mean herein "available" or "offered" when 
discussing content. 

[0015] In a further aspect, a system, method and computer program is provided to 
implement access of content receivable by a terminal across a communication medium. This 
implementation may involve receiving from a remote location a content guide including at least 
items identifying content or content-types receivable by a terminal for consumption and access 
rating for receivable content, the items of the content guide being arranged in a parent-child 
hierarchical structure having a hierarchy rule in which an access rating of a child item does not 
exceed an access rating of a corresponding parent item in the content guide; and controlling 
access or consumption of receivable content according to an access rights level of a user 
associated with the terminal and the access rating of content from the content guide. Access 
control may involve filtering the items of the content guide based on the access rights level of for 
the user, such as processing items of the content guide based on the access rights level for the 
user. The processing of items may involve abstaining from processing a parent item and any 
associated child items when an access rating of the parent item exceeds the access rights level of 
the user. 

[0016] In yet a further aspect, a system, method and computer program are provided to 
control access to content. This implementation may involve providing content; and encoding the 
content with an electronic watermark indicating an access rating associated with the content. 
The access rating may define a suitability of unsuitability for consumption by a user. Content 
having an electronic watermark indicating an access rating associated with the content may be 
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received; and access to content by at least one user of the terminal may be controlled according 
to the access rating. The access to content may be controlled according to the access rating and 
an access rights level of the user. The content having 46 watermark" may be implemented in three 
UDP-streams: Audio, Video and Data which all are synchronized together. At least one of the 
streams may contain various meta information about the content (e.g., one example of which 
may be the age-limit). 

[0017] In various implementation herein, a computer-readable medium may be encoded 
with processing instructions for implementing the various method and functions herein to control 
access to content, to be performed by a computerized system. In various aspects, the 
computerized system may take the form of a communications device or system. The various 
implementations herein may also be performed by hardware, software, firmware or a 
combination thereof. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0018] In the drawings, like reference numbers generally indicate identical, functionally 
similar, and/or structurally similar elements. The drawing in which an element first appears is 
indicated by the leftmost digit(s) in the reference number. The present invention will be 
described with reference to the accompanying drawings, wherein: 

[0019] FIG. 1 is a diagram of an exemplary operational environment in accordance with 
one embodiment of the present invention; 

[0020] FIG. 2 is a diagram of an exemplary operational environment in accordance with 
another embodiment of the present invention; 

[0021] FIG. 3 is a block diagram of an exemplary communications device 
implementation; 

[0022] FIG. 4 is a block diagram of an exemplary content receiving device 
implementation; 

[0023] FIG. 5 is a block diagram of an exemplary content provider or manager 
implementation; 
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[0024] FIGS . 6-9 are screenshots of an exemplary content guide; 

[0025] FIG. 10 is an exemplary framework of a content guide having a hierarchical 
structure based on access ratings of guide item classifying content and/or content-types; 

[0026] FIGS. 11-18 are flowcharts of exemplary processes by which access or 
consumption of content is controlled; 

[0027] FIG. 19 is a flowchart of an exemplary process by which a content guide is 
updated or modified; 

[0028] FIG. 20 is a flowchart of an exemplary process by which a user access rights level 
is set; 

[0029] FIGS. 21-22 are flowcharts of exemplary processes by which content is encoded 
with access rating and access to such content is controlled; 

[0030] FIG. 23 is a flowchart of an exemplary short-range encounter between two 
devices, such as a content receiver and a user's device, employing Bluetooth communications; 
and 

[0031] FIG. 24 is a flowchart of an exemplary short-range encounter between two 
devices, such as a content receiver and a user's device, employing at least RFID technology. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

I. OPERATIONAL ENVIRONMENTS 

[0032] Before describing the invention in detail, it is helpful to describe various 
environments in which the invention may be used. Accordingly, FIG. 1 is a diagram of an 
operational environment in which content receiver 110 and content manager or provider 
(hereinafter "content provider") 140 communicate by way of communications transmissions 132 
across a network environment 132 in accordance with one embodiment of the present invention. 
Communications transmission 132 may be unilateral, bilateral or multilateral. 

[0033] Communications may involve the transmission of content related information 
including content, content guide or the like identifying receivable content, or other data to 
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facilitate delivery and consumption of content at the content receiver side. Examples of such 
content may include multimedia broadcasts or multicasts, audio broadcasts or multicasts, images, 
video, music, games, data files, electronic documents, database entries and so forth. 

[0034] Network environment 132 may be any suitable network that enables the transfer 
of information between content provider 140 and receiver 110. For instance, communications 
network 132 may be a broadcast or multicast network. Examples of broadcast networks include 
terrestrial and satellite wireless television distribution systems, and broadcast cable networks, 
such as a Data Over Cable Service Interface Specification (DOCSIS) network. The broadcast 
network may be a digital broadcasting network which supports the Digital Video Broadcast 
(DVB) standard, such as Terrestrial Digital Video Broadcasting (DVB-T) or may employ other 
DVB-based standards, such as DVB-MHP (Multimedia Home Platform), DVB-H (handheld), 
DVB-IP and so forth. 

[0035] In this regard, DVB-T, which is related to DVB-C (cable) and DVB-S (satellite), 
is the terrestrial variant of the DVB standard. As is well known, DVB-T is a wireless point-to- 
multipoint data delivery mechanism developed for digital TV broadcasting, and is based on the 
MPEG-2 transport stream for the transmission of video and synchronized audio. DVB-T has the 
capability of efficiently transmitting large amounts of data over a broadcast channel to a high 
number of users at a lower cost, when compared to data transmission through mobile 
telecommunication networks using, e.g., 3G systems. Advantageously, DVB-T has also proven 
to be exceptionally robust in that it provides increased performance in geographic conditions that 
would normally affect other types of transmissions, such as the rapid changes of reception 
conditions, and hilly and mountainous terrain. On the other hand, other variations of this DVB-T 
are coming in markets to and take into account handheld devices capabilities, like power 
consumptions. 

[0036] Digital broadband data broadcast networks are for in addition to the delivery of 
television content capable of delivering data, such as Internet Protocol (IP) data. Other examples 
of broadband data broadcast networks include Japanese Terrestrial Integrated Service Digital 
Broadcasting (ISDB-T), Digital Audio Broadcasting (DAB), and MBMS, and those networks 
provided by the Advanced Television Systems Committee (ATSC). In many such systems, a 
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containerization technique is utilized in which content for transmission is placed into MPEG-2 
packets which act as data containers. Thus, the containers can be utilized to transport any 
suitably digitized data including, but not limited to High Definition TV, multiple channel 
Standard definition TV (PAUNTSC or SECAM) and, of course, broadband multimedia data and 
interactive services. 

[0037] Network environment 132 may also be a packet-based network, such as the 
Internet or a wireless cellular network that, in addition to voice telephony, allows the transfer of 
content and data and other services. For example, network environment 132 may be capable of 
operating in accordance with 2G wireless communication protocols IS- 136 (TDMA), GSM, and 
IS-95 (CDMA). Some narrow-band AMPS (NAMPS), as well as TACS, network environments 
may also benefit from the teaching of this invention, as should dual or higher mode networks 
(e.g., digital/analog or TDMA/CDMA/analog networks). 

[0038] As a further example, network environment 132 may be a third generation (3G) 
mobile network such as the Universal Mobile Telephone System (UMTS) network employing 
Wideband Code Division Multiple Access (WCDMA) radio access technology. 

[0039] Content provider 140 may be any device or system suitable for generating, 
modifying, managing and/or delivering content and other related information to facilitate 
delivery and consumption of content in accordance with the access control implementations 
herein. The other related information may include content guide, access ratings of content, 
access information to obtain particular content, and so forth. Content provider 140 may also 
encode (or embed) content with an access rating, such as through the use of electronic 
watermarking technologies employed in setting copyright watermarks. 

[0040] Administrative terminal 1 50 may be any device or system suitable for enabling an 
administrator to perform general administrative duties over content provider 140 and to manage 
content maintained and delivered by the provider. For example, terminal 150 may be a computer 
connected to content provider 140 via a network. 

[0041 ] Content receiver 110 may be any device or system suitable for receiving content 
related information, such as content and content guide, and outputting content guide for selection 
by one or more users (e.g., an audience) and outputting content for consumption by one or more 
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users. The output of content may involve the use of a media player or the like. In various 
embodiments, content receiver 110 may be a set top box (STB) connected to or integrated with 
an output device(s) such as a display, a speaker, a television set, a home entertainment system, 
kiosk, and so forth. 

[0042] As shown in FIG. 1, content receiver 110 may further perform communications 
with one or more wireless communications devices (WCDs) 120 across a wireless medium. 
Communications between receiver 110 and a WCD 120 may be conducted via a short-range 
wireless network, such as personal area networks (PANs) and/or wireless local area networks 
(WLANs). An exemplary PAN is Bluetooth. Examples of WLAN standards include the IEEE 
802.11 standard and the HIPERLAN standard. When employing Bluetooth communications, 
receiver 110 may be the master device with WCDs 120 being slave devices. 

[0043] Other shorter range or longer range wireless communications technologies may 
also be employed in to facilitate communications between WCD 120 and receiver 110. These 
may include for example Infra-Red technologies, Radio Frequency Identification (RFED) 
technologies, cellular and so forth. When employing RFED, receiver 110 may include an RFID 
reader and WCD 120 may include RFID transponder or tag. 

[0044] WCD 120 may be a cellular phone, pager, personal digital assistant (PDA), or 
other wireless-enabled device or terminal which may be carried on a person. When a 
transponder, such as a RFID transponder is employed, WCD 120 may also take any shape or 
form such as a card, personal accessory (e.g., watch, jewelry, etc.), badge and so forth. 

[0045] In general, a content receiver may be configured to control any level of media 
consumption by one or more users (or consumers), such as from receipt of content, user search or 
selection of content, and output of content. 

[0046] In one aspect of the access control implementations herein, a content receiver 
controls user access, by one or more users each having associated therewith a wireless 
communications device, to content receivable across a communications medium. The content 
receiver detects a presence of one or more users in at least one region in which the receivable 
content may be consumed via the one or more users' wireless communications devices by 
wireless communications, and determines access rights to receivable content based on the 
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detected one or more users. The access rights may define a suitability of unsuitability of one or 
more users to consume content. Access or consumption of receivable content by the one or more 
detected users may be selectively controlled according to at least one of the determined access 
rights and access rating of receivable content. 

[0047] In the example shown in FIG. 1, a reference numeral 112 designates a region in 
which content from the content receiver may be consumed by one or more users. As shown, in 
region 112, three users may be watching content, such as television programs, received and 
outputted from receiver 110 on a television set in a recreation room of a house. Each user has 
associated therewith a WCD 120. Receiver 110 detects a presence of the users in the region via 
their WCDs 120 and controls access or consumption of content based on detected users. 

[0048] Access control may involve, for example, obtaining an access rights level of at 
least one of the detected users, and selectively restricting or allowing consumption of content 
according to at least an access rights level of at least one of the detected users or a nature of the 
content. For example, in FIG. 1, the lowest or highest access rights level of the three users may 
be employed in the operation of controlling access or consumption of content. In a parental 
control context, access rights level may define a level of content suitable or not suitable for 
consumption by a user according to a maturity level or age of the user or the nature of the 
content or other suitable rating system. 

[0049] Access rights level for an audience of one detected user or a group of detected 
users may be dynamically updated and accessibility or restriction to content may be dynamically 
changed accordingly. Access rights level for a user or a group of users may also be determined 
for a time period, such as until one or more user's device are turned off or powered down. 

[0050] In another aspect, receiver 110 may be provided with a content guide which may 
identify various content receivable for access and/or consumption and include information on 
how to obtain the various content and access ratings for one or more content. The content guide 
may be an Electronic Program Guide (EPG), Electronic Service Guide (ESG), Mobile Media 
Guide (MMG), Digital Television Guide or other user guide or menu which may be outputted to 
a user such as for search and selection of content. For example, the Electronic Service Guide 
metadata (ESG metadata) contains information about the services available. Through that 
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information, using ESG application, a user can select the services and items he/she is interested 
in and find stored items on the terminal. The information in the content guide may be filtered to 
restrict or allow access and consumption of content in a selective manner in accordance with at 
least an access right level of one or more users. 

[0051] In a further aspect, power consumption of receiver 110 may be reduced or 
minimized when content may be delivered through time-slicing (or data bursts) communications 
protocol. This is particularly useful when a portable receiver is employed. One method to 
reduce power consumption would be to use Time Division Multiplex (TDM) where a receiver is 
ON only when receiving data (or service) bursts. In accordance with an access control 
implementation herein, the receiver may be configured to turn OFF or power down when 
receiving data bursts for restricted content, e.g., content deemed unsuitable for access and 
consumption by one or more users, or to turn ON or power up when receiving data bursts for 
non-restricted or suitable content. 

[0052] Although the above example discusses access control in the context of a set top 
box receiver arrangement, the access control implementation may be employed in conjunction 
with any receiver device or terminal arrangement where one or more users may be able to 
consume (e.g., view, hear, etc.) content outputted from the device. For example, receiver 110 
may take the form of a cellular phone, personal digital assistant (PDA) or the like, computer or 
portable computer, other portable communications terminal and so forth. 

[0053] FIG. 2 is a diagram of an operational environment similar to that shown and 
described above for FIG. 1. As shown, a communications device 210 and content provider 140 
communicate by way of communications transmissions 220 across a network environment 222. 
This environment is simply provided to show that the various access control implementations 
described herein may also be employed with a portable device, such as a cellular phone, PDA or 
the like, computer or portable computer, other portable communications terminal and so forth. 

[0054] The above description of the operational environments of FIGS. 1 and 2 provide a 
few exemplary operational environments for performing access control over content. These and 
other examples are discussed in further detail below. The access control implementations herein 
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make it possible to preserve desired level of intimacy on any level of media consumption starting 
from searching for the content, selecting desired content or outputting certain content. 

H. BLUETOOTH TECHNOLOGY 

[0055] As discussed above, receiver 110, WCD 120 and device 210 may employ 
Bluetooth technologies to perform communications. An exemplary architecture of a Bluetooth- 
enabled device may include a host, which is coupled to a Bluetooth segment. The host is 
responsible for functions involving user applications and higher protocol layers, while the 
Bluetooth segment is responsible for lower layer protocols. More particularly, the Bluetooth 
segment is responsible for Bluetooth specific communications with other devices. 

[0056] The Bluetooth segment includes a host controller interface (HCI), a link manager, 
a link controller, a Bluetooth transceiver, and an antenna. 

[0057] The link manager performs functions related to Bluetooth link set-up, security and 
control. These functions involve discovering corresponding link managers at remote devices and 
communicating with them according to a link manager protocol (LMP). To perform these 
functions, LMP defines a set of messages, which are also referred to as protocol data units 
(PDUs). The link manager exchanges these PDUs with link managers at remote devices. 

[0058] The link manager exchanges information with the host across the HCI. This 
information may include commands received from the host, and information transmitted to the 
host. The HCI defines a set of messages, which provide for this exchange of information. 

[0059] The link controller operates as an intermediary between the link manager and the 
Bluetooth transceiver. The link controller also performs baseband processing for Bluetooth 
transmission, such as error correction encoding and decoding. In addition, the link controller 
exchanges data between corresponding link controllers at remote devices according to physical 
layer protocols. Examples of such physical layer protocols include retransmission protocols such 
as the ARQ protocol. 

Docket No. 4208-4160 12 
(Case No. NC 28853) 

46303 vl 



[0060] The Bluetooth transceiver is coupled to an antenna. The transceiver includes 
electronics that allow the device (in conjunction with the antenna) to exchange wireless 
Bluetooth signals with devices. Such electronics include modulators and demodulators, 
amplifiers, and filters. In a master-slave implementation, the range of a master device may be 
configured to cover an area or region, such as shown by reference numeral 112 of FIG.l, in 
which content may be consumed. 

[0061] This architecture may be implemented in hardware, software, firmware, or any 
combination thereof and may be employed to implement other types of wireless communications 
technologies. 

m. RFID TECHNOLOGY 

[0062] RFID technology utilizes electromagnetic or electrostatic coupling in the radio 
frequency (RF) portion of the electromagnetic spectrum. An RFID reader includes at least an 
antenna and transceiver. An RF signal is transmitted from the RFID reader that activates the an 
RFID transponder or tag when touched to, or within a predetermined range of, the tag. When a 
tag has been activated, it transmits information back to the RFID reader. More particularly, in 
the case of a passive tag (described below), the tag may be energized by a time-varying 
electromagnetic RF wave generated by the RFID reader. When the RF field passes through the 
antenna coil associated with the tag, a voltage is generated across the coil. This voltage is 
ultimately used to power the tag, and make possible the tag's return transmission of information 
to the reader, sometimes referred to as backscattering. 

[0063] RFID does not require direct contact, although direct contact with an RFID tag 
can occur, and in some instances may be required. The frequency employed will at least 
partially dictate the transmission range of the reader/tag link. The required proximity of the 
RFID reader to a tag can range from a very short range (touching or near touching) to many 
meters, depending on the frequency employed and the power output. For example, when a WCD 
with RFID tag comes within a range of a device with an RFID reader, the tag can receive a signal 
from the RFID reader and respond with the desired information. In one aspect, the range of the 
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reader may be configured to cover an area or region, such as shown by reference numeral 1 12 of 
FIG.l, in which content may be consumed. 

[0064] It should also be noted that various aspects herein may involve a tag having 
substantially no transmission range, but rather may include contacts that physically couple to 
corresponding contacts to the RFID reader. While such an embodiment will be unable to avail 
itself of some of the benefits of RFED or other analogous technology, such an embodiment is 
feasible in connection with the access control implementations herein. 

[0065] Any type of RFID tag may be used in connection with the access control 
implementations herein. For example, RFID tags can be either active or passive. Active tags 
require an internal battery and are often read/write tags. Passive tags do not require a dedicated 
power source, but rather obtain operating power generated from the reader. Further, tags may 
come in a variety of shapes and sizes, but are generally based on a custom designed silicon 
integrated circuit. Any transponder/tag may be used in connection with the access control 
implementations herein, and the tag type, size, etc. depends on the particular environment or 
application. 

IV. COMMUNICATIONS DEVICE 

[0066] FIG. 3 illustrates an exemplary architecture for a communications device, such as 
for WCD 120 and device 210 of FIGS. 1 and 2, respectively. This architecture includes a 
processor 310, a memory 320, and an interface 340. In addition, the architecture of FIG. 3 may 
include transceivers) 350 such as a Bluetooth transceiver or other types of wireless 
communications transceivers, and antenna(s) 352 and/or RFID transponder or tag 330 and 
antenna 332. Bluetooth transceiver 350 and RFED tag 332 may be implemented in a manner 
described above. 

[0067] As shown in FIG. 3, processor 310 is coupled to transceiver(s) 350 and RFID tag 
330. Processor 310 controls device operation. Processor 310 may be implemented with one or 
more microprocessors that are each capable of executing software instructions stored in memory 
320. 
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[0068] Memory 320 includes random access memory (RAM), read only memory (ROM), 
and/or flash memory, and stores information in the form of data and software components (also 
referred to herein as modules). These software components include instructions that can be 
executed by processor 310. Various types of software components may be stored in memory 
320. For instance, memory 320 may store software components that control the operations of 
transceiver(s) 350 and RFID tag 330. Also, memory 320 may store software components that 
provide for the communications functionality, such as for the host, HCI interface, link manager, 
link controller or other communications components. 

[0069] In addition, memory 320 may store software components that control the 
exchange of information through interface 340. As shown in FIG. 3, interface 340 is also 
coupled to processor 310. Interface 340 may facilitate the exchange of information with a user 
or other coupled devices. FIG. 3 shows that interface 340 includes an input portion 342 and an 
output portion 344. Input portion 342 may include one or more devices that allow a user to input 
information. Examples of such devices include keypads, touch screens, and microphones. 
Output portion 344 allows a user to receive information from WCD 120 or device 210. Thus, 
output portion 344 may include various devices, such as a display 346, and one or more audio 
speakers. Exemplary displays include liquid crystal displays (LCDs), and video displays. 
Display 346 may output a content guide or the like and content. 

[0070] Furthermore, memory 320 may store a variety of data and applications to 
implement the various processes herein for performing access control over content. For 
example, memory 320 may store a content guide(s) 322 or the like (e.g., filtered and/or 
unfiltered), an access right database 324 or the like identifying access rights level profiles or data 
for one or more user profiles, access control procedures 326 for implementing the various 
functions and processes herein to control access and consumption of content, and other data or 
programs for facilitating selection, search and consumption of content, such as a media player. 

[0071] The architecture of FIG. 3 may also include a watermark detecting/decoding 
module 326 for detecting, decoding and reading electronic (or digital) watermark encoded data, 
such as copyright information, access rating for content or other watermark encoded information. 
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[0072] The elements shown in FIG. 3 may be coupled according to various techniques. 
One such technique involves coupling processor 310, memory 320, RFID tag 332, interface 340, 
transceiver(s) 350 and watermark detecting/decoding module 360 through one or more bus 
interfaces. In addition, each of these components may be coupled to a power source, such as a 
removable and rechargeable battery pack (not shown) or a fixed power supply. 

[0073] In various aspects herein, the architecture of FIG. 3 may also include broadcast 
receiver and interface, such as broadcast receiver(s) 370 and antenna(s) 372, to receive 
broadcasts. The receiver may include one or more antennas 372 (e.g., broadcast antennas) for 
receiving content (e.g. broadcast antenna) and/or one or more antennas for receiving and 
transmitting content. Various broadcasting schemes are described below in the Receiver Device 
section. 

V. RECEIVER DEVICE 

[0074] FIG. 4 illustrates an exemplary architecture for a communications device, such as 
for receiver 110 and device 210 of FIGS. 1 and 2, respectively. This architecture includes a 
processor 410, a memory 420, and an interface 440. In addition, the architecture of FIG. 4 may 
include transceiver(s) 450 such as a Bluetooth transceiver or other types of wireless 
communications transceivers and antenna(s) 452 and communications line(s) 454, and/or RFID 
reader 430 and antenna 432. Bluetooth transceiver 450 and RFID reader 432 may be 
implemented in a manner described above. 

[0075] As shown in FIG. 4, processor 410 is coupled to transceiver(s) 450 and RFED 
reader 430. Processor 410 controls device operation. Processor 410 may be implemented with 
one or more microprocessors that are each capable of executing software instructions stored in 
memory 420. 

[0076] Memory 420 includes random access memory (RAM), read only memory (ROM), 
and/or flash memory, and stores information in the form of data and software components (also 
referred to herein as modules). These software components include instructions that can be 
executed by processor 410. Various types of software components may be stored in memory 
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420. For instance, memory 420 may store software components that control the operations of 
transceiver(s) 450 and RFBD tag 430. Also, memory 420 may store software components that 
provide for the communications functionality, such as for the host, HCI interface, link manager, 
link controller or other communications components. 

[0077] In addition, memory 420 may store software components that control the 
exchange of information through interface 440. As shown in FIG. 4, interface 440 is also 
coupled to processor 410. Interface 440 may facilitate the exchange of information with a user 
or other coupled devices. FIG. 4 shows that interface 440 includes an input portion 442 and an 
output portion 444. Input portion 442 may include one or more devices that allow a user to input 
information. Examples of such devices include keypads, touch screens, and microphones. 
Output portion 444 allows a user to receive information from receiver 1 10 or device 210. Thus, 
output portion 444 may include various devices, such as a display 446, and one or more audio 
speakers. Exemplary displays include liquid crystal displays (LCDs), and video displays. 
Display 446 may output a content guide or the like and content. 

[0078] Furthermore, memory 420 may store a variety of data and applications to 
implement the various processes herein for performing access control over content. For 
example, memory 420 may store a content guide(s) 422 or the like (filtered or unfiltered), an 
access right database 424 or the like identifying access rights level profiles or data for one or 
more user profiles, access control procedures 426 for implementing the various functions and 
processes herein to control access and consumption of content, and other data or programs for 
facilitating selection, search and consumption of content, such as a media player. 

[0079] The architecture of FIG. 4 may also include a watermark detecting/decoding 
module 426 for detecting, decoding and reading electronic watermark encoded data, such as 
copyright information, access rating for content or other watermark encoded information. 

[0080] The elements shown in FIG. 4 may be coupled according to various techniques. 
One such technique involves coupling processor 410, memory 420, RFID reader 432, interface 
440, transceivers) 450 and watermark detecting/decoding module 426 through one or more bus 
interfaces. In addition, each of these components may be coupled to a power source, such as a 
removable and rechargeable battery pack (not shown) or a fixed power supply. 
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[0081] In various aspects herein, the architecture of FIG. 4 may also include broadcast 
receiver and interface, such as broadcast receiver(s) 470 and antenna(s) 472, to receive 
broadcasts. The receiver may include one or more antennas 472 (e.g., broadcast antennas) for 
receiving content (e.g. broadcast antenna) and/or one or more antennas for receiving and 
transmitting content. 

[0082] In this example, it is possible to employ IP datacasting data to mobile clients over 
a wireless link using terrestrial DVB (DVB-T) communication techniques to provide audio, 
video and other data to mobile receivers. 

[0083] The DVB-T transmission scheme is essentially cellular in nature with a 
transmission site associated with each cell. DVB-T uses MPEG-2 transport streams and so the 
IP data needs to be encapsulated into the DVB transmission signals. Data streams, comprising 
IP datagrams supplied from several sources, are encapsulated by an IP encapsulator and fed into 
the DVB-T network. The encapsulated IP stream is then transported to one or multiple 
transmission sites, which form cells of the DVB-T network, on an MPEG-2 transport stream for 
transmission over the air directly to the clients, or to a receiver station serving multiple clients. 

[0084] The MPEG-2 transport stream, from the moment it is produced by the IP 
encapsulator, to the moment it is received by the client or the receiver station, is uni-directional 
in nature. IP packets containing the data are embedded in multi-protocol encapsulation (MPE) 
sections, which are transported within the TS packets. The MPE sections may also include 
forward error correction (FEC) information and time slicing information, by which data is 
conveyed discontinuously and allows the receiver to save battery power by switching off when 
no data is being transmitted to it. In other words, in the time slicing method instead of using the 
current default method of continuous DVB-T transmission, a time division multiplex-type of 
allocation is used. With this approach services are provided in bursts, making it possible to turn 
off a receiver when it is not needed and to turn it on to receive data packets. 
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VI. CONTENT PROVIDER 

[0085] FIG. 5 illustrates an exemplary architecture for a content manager or provider 
system, such as content provider 140 of FIGS. 1 and 2, respectively. This architecture includes a 
processor 510, a memory 520, and may include an interface 540. In addition, the architecture of 
FIG. 5 may include communications interface 530 for performing communications such as with 
other remote systems and devices across a network environment. 

[0086] As shown in FIG. 5, processor 510 is coupled to communications interface 530. 
Processor 510 controls device operation. Processor 510 may be implemented with one or more 
microprocessors that are each capable of executing software instructions stored in memory 520. 

[0087] Memory 520 includes random access memory (RAM), read only memory (ROM), 
and/or flash memory, and stores information in the form of data and software components (also 
referred to herein as modules). These software components include instructions that can be 
executed by processor 510. Various types of software components may be stored in memory 
520. For instance, memory 520 may store software components that control the operations of 
communications interface(s) 530. Also, memory 520 may store software components that 
provide for the communications functionality. 

[0088] In addition, memory 520 may store software components that control the 
exchange of information through interface 540, if any. As shown in FIG. 5, interface 540 is also 
coupled to processor 510. Interface 540 may facilitate the exchange of information with a user 
or other coupled devices. FIG. 5 shows that interface 540 includes an input portion 542 and an 
output portion 544. Input portion 542 may include one or more devices that allow a user to input 
information. Examples of such devices include keypads, touch screens, and microphones. 
Output portion 544 allows a user to receive information from provider 140. Thus, output portion 
544 may include various devices, such as a display, and one or more audio speakers. Exemplary 
displays include liquid crystal displays (LCDs), and video displays. The content provider may 
have means or the ability to transmit data to the receiver devices throughbroadcast transmission 
interface. 

[0089] Furthermore, memory 520 may store a variety of data and applications to 
implement the various processes herein for performing access control over content. For 
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example, memory 520 may store a variety of content 522 and content related information, such 
as a content guide(s) 524 or the like. 

[0090] The architecture of FIG. 5 may also include a watermark encoder 550 for 
encoding (or embedding) content with an electronic watermark with information such as 
copyright information, access rating for content or other information to facilitate access control 
implementations herein. 

[0091] The elements shown in FIG. 5 may be coupled according to various techniques. 
One such technique involves coupling processor 510, memory 520, communications interface 
530, interface 540 and watermark encoder 550 through one or more bus interfaces. In addition, 
each of these components may be coupled to a power source, such as a removable and 
rechargeable battery pack (not shown) or a fixed power supply. 

VH. EXEMPLARY CONTENT RELATED INFORMATION 

[0092] FIGS. 6-9 are screenshots reflecting exemplary presentations of information from 
a filtered content guide or the like in accordance with access control implementations herein. 
The screenshots show information from a content guide, such as EPG, ESG, etc., which is 
outputted to a user such as for selection based on the access rights level of one or more users and 
the access rating of the receivable content or content-type. The information may include 
information identifying the different receivable content and content-types and their associated 
access ratings. The content guide information may be outputted as a menu with selectable items 
and configured in a hierarchical tiered arrangement, such as by main category of content, 
subcategories of content, actual content, etc. A user may traverse the various menu items to 
select a desired content for output and consumption. Alternatively, the user may search the 
content guide to find particular content or content-type(s) employing a text search or the like. 
For example, the user may search by title, name, author, program time, channel, and so forth. 

[0093] By filtering here is meant that the profile (e.g. I am 15 years old and I cannot 
watch the movies which are not allowed under 15 years old) in the mobile terminal is compared 
to the received content. Usually, the profile is set to the user when he subscribes to the phone 
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services or other services, such as like making an agreement with the operator of the cellular 
network. The content guide or the content itself could be filtered separately or together. Thus, 
for example, the content guide may be hidden for those portions which are not allowed or 
suitable to the user. By filtering the content guide or the like, it is possible to selectively restrict 
or enable access or consumption of content according to the suitability or unsuitability of such 
for an audience of a user or group of users. It is further possible to reduce communications 
traffic and workload on the content transmitting and receiving sides by controlling transmission 
and/or receipt of content determined to be unsuitable for an end user(s), e.g., consumer(s) or 
potential consumer(s). 

[0094] To facilitate understanding of the filtering aspects of a content guide or the like, 
examples of different receivable menu items are shown for an audience of one user or a group of 
users having an access rights level of Adult (AD) in FIGS. 6 and 7 and an audience of one user 
or a group of users having an access rights level of 15 years old in FIGS. 8 and 9. 

[0095] For example, as shown in FIG. 6, a menu of items may be provided to a user (or 
group of users) having an access rights level of Adult. The menu of items receivable by this user 
may include access to NEWS having a highest access rating (AR) of 11 years old, VIDEO 
having a highest AR of Adult, MUSIC having a highest AR of general audience (G), GAMES 
having a highest AR of 16 years old and MISCELLANEOUS SERVICES having a highest AR 
of Adult. The user may traverse the menu of items to select a content category or subcategory 
for output. For example, in FIG. 7, a sub-menu of items is provided after a selection of VIDEO 
in FIG. 8 by a user having an access rights level of Adult. As shown in FIG. 8, the user is 
offered menu items VIDEO 1, VIDEO 2, VIDEO 3 and VIDEO 4 having highest ARs of 7 years 
old, G, 16 years old, Adult, respectively. 

[0096] In comparison, as shown in FIG. 8, a menu of items may be provided to a user (or 
group of users) having an access rights level of 15 years old. The menu of items receivable by 
this user may include access to NEWS having a highest AR of 1 1 years old, VIDEO having an 
AR of 7 years old, MUSIC having an AR of General Audience. The user may traverse the menu 
of items to select a content category or subcategory for output. For example, in FIG. 9, a sub- 
menu of items is provided after a selection of VIDEO in FIG. 8 by a user having an access rights 
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level of 15 years old. As compared to the choices provided to a user with an access rights level 
of Adult in FIGS. 6 and 7, the user in FIG. 9 with an access rights level of 15 years old is only 
offered menu items VIDEO 1 and VIDEO 2 having ARs of 7 years old and General Audience. 

[0097] Although the above described one example of a content guide or menu and 
filtering thereof, other configurations may be employed with the access control implementation 
herein. These other configurations may include different visual or graphical layout of the menu 
items, different output medium for the menu of items such as in an audio format, hierarchical 
framework including only one tier of selections or multiple tiers, ordering of menu items such as 
by alphabetical order, and so forth. Further, other content-types than those shown and described 
in FIGS. 6-9 may be offered and other access rating types than those shown and described in 
FIGS. 6-9 may be employed in conjunction with the access control implementation herein. 

[0098] FIG. 10 is a framework of an exemplary content guide 1000 having a hierarchical 
structure, such as a tree structure defining parent/child relationships, based on access ratings of 
items in the guide. 

[0099] The basic principle when using parental rating values is that the rating of the 
upper level always defines the highest rating value of the lower levels. For example, if the 
parental rating of a category is 5, the parental ratings of the service sets below that category must 
be 5 or below 5. The enumeration values, such as parental rating values, are typically in XML 
files described using integers. In Session Description Protocol (SDP) files, the enumeration 
values are either integers or strings. In most cases, terminals and the network must agree on the 
meaning of the values to be able to use the fields correctly. This chapter lists the enumeration 
values used and in the following chapters there is only a reference that the value is an 
enumeration. The items of the guide may represent some classification of content. 

[0100] For example, content guide 1000 may include categories (Cat) classifying 
services. Below a category in the hierarchy there can be subcategories (SubCat) or service sets 
thereof classifying receivable content-types. Each subcategory may have associated therewith 
one or more channels, and each channel may have associated therewith one or more services. A 
service may belong to one or more channels and may be formed of one or more programs which 
is a user-perceived item that describes the content. In other words, in this example, service is the 
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lowest level in hierarchy of categories, service sets and services. A service always belongs to one 
CP/SP (Content Provider / Service Provider). Services have service sessions, which mean the 
scheduled transmission of content related to the service. A service session can contain one or 
more IP sessions. Service sets combine the same kind of services of one service/content provider 
together. The same service can belong to many different service sets. 

[0101] Content guide 1000 may also include information identifying the manner in which 
particular content may be accessed or received, such as the location or address of the content 
(depending on the communications technologies), the data transport or mode attributes, format of 
the data, size of the data, timing information related to the data (e.g., start and end times) or any 
other information which may facilitate access to content from a content provider(s). In this 
example, content guide 100 includes IP-Session information including address, bitrate, start time 
and end time, and programs offered are shown as being time dependent. 

[0102] To facilitate access control over content, content guide 1000 may include access 
rating information associated with content or different items (e.g., categories, subcategories, 
channel, service, program, etc.) related to content identified or offered by the guide. The access 
rating for a particular content may rate the suitability or unsuitability of the particular content or 
content group (e.g., category, subcategory, channel, service, etc.) for consumption by a particular 
audience of one user or group of users. For example, in a parental control context, access rating 
may take the form of a parental rating in which content may be rated according to an age or age 
group or generally a maturity level (e.g., 15 years old, adult, etc.) or by the nature of the content 
(e.g., violence, adult language, etc.). 

[01 03] The various items of content guide 1000 may be configured in a hierarchical 
arrangement subject to a hierarchy rule in which a rating of a child item may not exceed the 
rating of a parent item. For example, a channel item having a 1 5 years old rating may not have 
child service items or program items exceeding a 15 years old rating, such as 17 years old rating. 
Such an arrangement facilitates update and modification of content guide and access control 
processing employing such a content guide. These processes will be discussed further below 
with reference to FIGS. 18 and 19. 
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[0104] Although the above describes an example of a content guide framework, content 
guide may be configured in other manners to perform the access control implementations herein. 
For example, the content guide may include other types of items, may take the form of different 
layout (e.g., a list) with or without hierarchy rules, may employ other rating types to identify the 
suitability or unsuitability of content for particular audiences or consumers, may include other 
access related information depending on the manner in which content is delivered (e.g., 
multicast, broadcast, peer-to-peer, cellular network, cable network, satellite network, IP network, 
time-slicing, etc.), and so forth. 

[0105] Further, access right information for content is described above as being provided 
as part of content guide but may be provided in other manners. For example, access right 
information for content may be maintained locally or remotely in a storage facility and retrieved 
according to the desired content(s) or may be encoded as a watermark or the like on content 
along with copyright. 



Vffl. EXEMPLARY ACCESS CONTROL IMPLEMENTATIONS 

[0106] Various exemplary processes associated with access control implementations will 
be discussed below in conjunction with the Figures. The various processes may be discussed 
below with reference to the operational environments and systems and devices shown and 
described above with reference to FIGS. 1 and 2. 

[0107] FIG. 1 1 is a flowchart of an exemplary process 1 100 by which access or 
consumption of content by a user is controlled in accordance with one embodiment of the present 
invention. The process 1 100 will be discussed with reference to the operation environment of 
FIG. 2. 

[0108] The process 1 1 00 begins at step 1 1 02 with WCD 2 1 0 receiving content related 
information from a remote system, such as content provider 140, across a network environment. 
The content related information may include, for example, content, a content guide, such as 
ESG, or other information identifying receivable content. Access rating information for content 
may also be received along with or as part of this information or may be maintained locally or 
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remotely in a storage facility (e.g., memory) and retrieved to identify an associated access rating 
or the like for received or receivable content. As discussed further below with reference to FIG. 
21, the content may be encoded (or embedded) with an electronic watermark indicating an access 
rating of the content. 

[0109] One exemplary embodiment of step 1 1 02 can be disclosed with ESG. As stated 
above, the ESG metadata contains information about the services available and this information 
is received by a WCD. As to ESG, a receiving mechanism for the information is ESG channel. 
ESG channel is the channel used to transport information about the available IP services. The 
information contains information about which services are available, how the content can be 
received and how to consume it. The information is typically sent as a set of announcement files 
by using IP based protocols. A description of how the files can be received and also the format 
of the files are provided as follows. The information reception can be divided into five phases: 
obtain the IP address for the hierarchy file, receive hierarchy file, main pages and service 
sessions descriptions, and retrieve detailed information. The service session information is 
described using SDP (Session Description Protocol) and XML. The XML is used for describing 
the content of session for the user and typically contains information relating to access rating. 

[0110] At step 1 1 04, WCD 2 1 0 determines the access rights level to content for a current 
user of WCD 210. The determination may involve accessing and retrieving from an access 
rights database or the like access right profiles for one or more users of WCD 210. The access 
right database or like may be maintained locally or at a remote location. 

[0111] At step 1 106, WCD 210 controls (e.g., restict or allow) access or consumption of 
content by the user according to the determined access rights level. For example, this may 
involve comparison of access rights level of the user to the access ratings of received or 
receivable content. Content having access rating in excess or outside the range of the user's 
access rights is restricted for access and consumption by the user, or content having access rating 
below or within the user's right is allowed to be accessed or consumed by the user. Such access 
control may be implemented in various manners, as follows: 

[0112] [ 1 ] Content selections based on content related information, such as content 
guide or the like, may be filtered to eliminate or prohibit output or selection of items related to 
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restricted content or content-type. For example, content selections or searches would not include 
restricted content. An example is shown and discussed above with reference to FIGS. 6-9. 

[0113] [2] Available content selections and choices including restricted content may 
be outputted to the user. However, a user may be informed of those selections, which are 
restricted before or after selection. For example, restricted content selections may be marked or 
identified in some manner to reflect a restricted status (e.g., "unavailable" marking, highlighted, 
etc.) before or after selection or may be identified (e.g., displayed) to the user but can not be 
selected. 

[0114] [3] Processing of restricted content or information related thereto is prevented 
or not performed by WCD 210. This may involve not processing or minimizing any processing 
of content related information associated with restricted content, or processing only content 
related information associated with non-restricted content. In the case of a content guide having 
a plurality of items, those items associated with restricted content are not processed such as for 
output in a menu of receivable content selections. An example of such an access control 
implementation is shown and described below with reference to FIGS. 18. 

[0115] [4] Receipt or retrieval of restricted content is prevented or not performed. 
Depending on the form of the content transmission, such as broadcast, multicast or peer-to-peer 
or so forth, WCD 210 may simply ignore broadcasts or multicasts of restricted content or not 
request or stop transmission of restricted content thereto. In the reverse, WCD may be 
configured to receive only broadcasts or multicasts of non-restricted content. 

[0116] In a further operational environment example in which content is delivered 
through time-slicing such as through Time Division Multiplexing (TDM), WCD 210 may turn a 
receiver of WCD OFF or power down during periods or data bursts in which restricted content is 
delivered or turn the receiver of WCD ON or power up during periods in which non-restricted 
content is delivered. Such an arrangement reduces power and processing usage of the WCD. 

[0117] [5] Content already being outputted for consumption may be restricted 
according to access rights level of a current user. For example, WCD 210 may terminate receipt, 
processing and/or output of content being currently consumed if such content is considered 
unsuitable for consumption by a current user of WCD 210. 
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[0118] The above are simply a few examples of approaches to control access or 
consumption of content. Other approaches may be employed, as desired, to restrict or allow 
access or consumption of content based on an access rights level of the user. Non-Restricted 
Content may be outputted to a user for consumption. 

[0119] Turning back to FIG. 11, at step 1 1 08, WCD 2 1 0 may update access rights level 
to content based on various triggering events and accordingly update access statuses (e.g., 
restricted or accessible) of content based on updated access rights level of the user. Such an 
update may be performed dynamically or manually by a user. 

[0120] For example, a user may switch his or her profile which may have a different 
access rights level associated therewith. The various access control implementations may be 
performed with the updated access rights level which may result in more or less restrictions to 
content or termination of receipt, processing and/or output of content currently being consumed 
by the user which becomes restricted in view of the updated access rights level. 

[0121] FIG. 12 is a flowchart of an exemplary process 1200 by which access or 
consumption of content by an audience of one user or a group of users is controlled in 
accordance with one embodiment of the present invention. The process 1200 will be discussed 
with reference to the operation environment of FIG. 1 in which a content receiver is able to 
output content for consumption by one or more users in one or more regions 112. The receiver 
may be a set top box (STB) which outputs content to one or more output devices, e.g., display, 
which may be viewed by one or more users. 

[0122] The process 1 200 begins at step 1 202 with receiver 110 receiving content related 
information from a remote system, such as a content provider 140. The content related 
information may include, for example, content, a content guide or other information identifying 
receivable content. Access rating information for content may also be received along with or as 
part of this information or may be maintained locally or remotely in a storage facility (e.g., 
memory) and retrieved to identify an associated access rating or the like for received or 
receivable content. As discussed further below with reference to FIG. 21, the content may be 
encoded (or embedded) with an electronic watermark indicating an access rating of the content. 
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[0123] At step 1 204, receiver 110 detects the presence of one or more users capable of 
consuming content received or receivable by the receiver. As shown in FIG. 1, receiver 110 may 
detect the presence of one user or a group of users via their wireless communications devices 120 
by wireless communications (e.g., RFID, Bluetooth, WLAN, etc.) in one or more regions 1 12 in 
which content may be consumed. Such communications may involve transmission of some 
information identifying a user and/or access rights level of the user. For example, user 
identification information may be a Bluetooth Address (BDADDR) of the user's device when 
employing Bluetooth communications or RFID tag when employing RFID communications. 
Other identifying data may be employed to facilitate detection and identification of a user. 

[0124] At step 1206, receiver 110 determines the access rights level to content for the 
detected user or the detected group of users. The determination may be based on receipt of 
access rights level information from the device(s) 120 or accessing an access right database or 
the like maintained locally or at a remote location based on the user identification information. 
In the situation where plural users are detected, the access rights level of the group may be the 
access rights level of any one of the detected users or may be based on an evaluation of the 
access rights level of some or all of the detected users (e.g., access rights level of group = lowest 
or highest access rights level of the group members or a combination of access rights levels of 
group members). 

[0125] At step 1208, receiver 110 controls (e.g., restricts or allows) access or 
consumption of content by the one or more detected users according to the determined access 
rights level of at least one of the detected users. For example, this may involve comparison of 
access rights level of a detected user or a group of detected users to the access ratings of received 
or receivable content. Content having access rating in excess or outside the range of the user's 
access rights is restricted for access and consumption by the user, or content having access rating 
below or within the user's right is allowed to be accessed or consumed by the user. Such access 
control may be implemented in various manners, as follows: 

[0126] [ 1 ] Content selections based on content related information, such as content 

guide or the like, may be filtered to eliminate or prohibit output or selection of items related to 
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restricted content or content-type. For example, content selections or searches would not include 
restricted content. An example is shown and discussed above with reference to FIGS. 6-9. 

[0127] [2] Available content selections and choices including restricted content may 
be outputted to the user. However, a user may be informed of those selections, which are 
restricted before or after selection. For example, restricted content selections may be marked or 
identified in some manner to reflect a restricted status (e.g., "unavailable" marking, highlighted, 
etc.) before or after selection or may be identified (e.g., displayed) to the user but can not be 
selected. 

[0128] [3] Processing of restricted content or information related thereto is prevented 
or not performed by receiver 1 10. This may involve not processing or minimizing any 
processing of content related information associated with restricted content, or processing only 
content related information associated with non-restricted content. In the case of a content guide 
having a plurality of items, those items associated with restricted content are not processed such 
as for output in a menu of receivable content selections. An example of such an access control 
implementation is shown and described below with reference to FIGS. 18. 

[0129] [4] Receipt or retrieval of restricted content is prevented or not performed. 
Depending on the form of the content transmission, such as broadcast, multicast or peer-to-peer 
or so forth, receiver 110 may simply ignore broadcasts or multicasts of restricted content or not 
request or stop transmission of restricted content thereto. In the reverse, receiver 110 may be 
confirgure to receive only broadcasts or multicasts of non-restricted content. 

[0130] In a further operational environment example in which content is delivered 
through time-slicing such as through Time Division Multiplexing (TDM), receiver 110 may turn 
OFF or power down during periods or data bursts in which restricted content is delivered or turn 
ON or power up during periods in which non-restricted content is delivered. Such an 
arrangement reduces power and processing usage of the receiver. In case all or at least some of 
the WCDs in the group have the WCDs which are provided with content or content guide 
separately, the profiles of the users of the corresponding WCDs are exchanged through short 
range connections between these WCDs so that the access to the content or content guide is 
defined by the highest access rating among these WCDs. 
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[0131] [5] Content already being outputted for consumption may be restricted 
according to the determined access rights level of one detected user or the group of detected 
users. For example, receiver 110 may terminate receipt, processing and/or output of content 
being currently consumed if such content is considered unsuitable for consumption by the 
detected user(s). 

[0132] In various aspects, the above processes may be implemented using Bluetooth or 
RFID technologies in the detection of a user's device and determination of the user's current 
access rights level. 

[0133] For example, in a Bluetooth implementation, the receiver and the WCD may 
perform inquiry/inquiry response processes to determine and identity of the user or user's WCD, 
such as BD_ADDR, to obtain an access rights level for the user based on the BD_ADDR and 
control access or consumption of content accordingly. This implementation may involve further 
verification such a PIN input by the user via WCD which may entail additional paging and 
connection set-up steps. 

[0134] In an RFID implementation, the receiver may identify a user with a RFID reader 
which reads identification information (including user ID) from an RFED tag to obtain an access 
rights level for the user based on the user ID. If additional security is desired, a remote controller 
may be used to input PIN for user by the receiver or, alternatively, a second communication link 
is established between the devices to transmit such information. 

[0135] A more detailed description of the Bluetooth and RFID implementations are 
provided below with reference to FIGS. 23 and 24. 

[0136] The above are simply a few examples of approaches to control access or 

consumption of restricted content. Other approaches may be employed, as desired, to restrict or 
allow access or consumption of content based on an access rights level of one or more detected 
users. Non-Restricted Content may be outputted to a user for consumption. 

[0137] Turning back to FIG. 1 2, at step 1210, receiver 110 may update access rights level 
to content based on various triggering events and update access statuses (e.g., restricted or 
accessible) of content based on updated access rights level for the current audience of one or 

Docket No. 4208-4160 30 
(Case No. NC 28853) 



46303 vl 



more detected users. Such an update may be performed dynamically or manually by one or more 
of the users. For example, the triggering events may involve a new user, a user leaving or a 
user's device powering down, changing profile of a user's device, and so forth. These and other 
exemplary triggering events are further discussed below with reference to FIG. 14. 

[0138] FIG. 1 3 is a flowchart of an exemplary process 1 300 by which an access rights 
level is determined for an audience of one or more detected users. The process 1300 will be 
described below with reference to the operational environment shown in FIG. 1 . 

[0139] The process 1300 begins at step 1302 when a determination of access rights level 
for an audience of one or more detected users is initiated by receiver 110. At step 1304, receiver 
110 obtains access rights level information of one or more detected users. At step 1306, receiver 
110 determines an access rights level for the detected audience by selecting the lowest or highest 
access rights level out of the access rights levels of the one or more detected users (e.g., access 
rights level of group = lowest or highest access rights level of the group members). The lowest 
or highest access rights level may thereafter be employed to control access or consumption of 
content for the audience of one or more detected users. 

[0140] The above is simply one example by which an access rights level for an audience 
of detected user(s) may be determined. Other determination implementations may be employed, 
such based on a combination of access right levels of detected users. For instance, this 
implementation may involve setting the access rights level for the detected group of users to an 
access rights level of Parental Guidance (PG) where the detected users includes at least one user 
with an access rights level of adult and another user with an access rights level of child, or other 
combinations as desired. As another alternative, an access rights level of any one of the detected 
users may be employed as the group access rights level. 

[0141] FIG. 1 4 is a flowchart of an exemplary process 1 400 by which an access rights 
level for one or more detected users may be updated based on a triggering event. The process 
1400 will be described with reference to the operational environment shown in FIG. 1. 

[0142] The process 1 400 begins at step 1 402 in which receiver 1 1 0 determines whether a 
triggering event has occurred to initiate an evaluation of whether to update an access rights level 
of an audience of detected user(s). Such a triggering event may include, for example, detection 
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of a new user, detection of a user leaving or the powering down of a detected user's device, 
detection of a change in access rights level of any one of the detected one or more user and so 
forth. A change in an access rights level of a detected user may occur when a user profile of a 
detected device is changed. 

[0143] At step 1404, receiver 110 evaluates access rights levels of the current audience of 
detected user(s) and determines an updated access rights level for the new audience arrangement. 
The new audience arrangement may include, for example, a newly detected user, a new user 
profile for a pre-existing detected device and other detected users, and may not include, for 
example, the user who is leaving or left or whose device has powered down. 

[0144] At step 1406, receiver 110 controls access or consumption of content based on an 
updated access rights level for the new audience of detected user(s). As discussed above, such 
access control may entail restricting receipt, search, selection or output of restricted content. 

[0145] The above simply provides a few examples of how access rights level for an 
audience and/or how access control over content may be changed upon some triggering event. 
Other events or conditions may occur to cause receiver 1 10 to update access rights level for an 
audience and/or to update restrictions (more or less or same) on content in accordance with the 
access control implementations herein. 

[0146] FIG. 1 5 is a flowchart of an exemplary process 1 500 by which an access rights 
level for an audience of one or more detected users may be updated. The process 1 500 will be 
described with reference to the operational environment shown in FIG. 1. 

[0147] At step 1 502, receiver 1 1 0 ascertains whether a user of WCD 1 20 no longer 
intends to consume content or is no longer capable of consuming content, e.g., the user is leaving 
or has left the consumption region or the user's device has powered down or turned off or left the 
communications range of the receiver. If such an occurrence is ascertained, the process 1500 
proceeds to step 1504 in which receiver 1 10 determines whether a user leaving time is greater 
than a time threshold (e.g., three minutes, etc.). If not, receiver 110 detects whether the user has 
returned at step 1506. If the user has returned within the threshold time, then receiver 1 10 
continues to provide access to content as if the user did not leave. Otherwise, receiver 110 may 
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continue to check whether the user has returned until the time threshold is exceeded at steps 1504 
and 1506. 

[0148] If the time threshold is exceeded, the process 1 500 proceeds to step 1 5 1 0 in which 
receiver 110 determines updated or new access rights level for the remaining detected user(s) and 
updates restriction on content based on the updated access rights level at step 1512. 

[0149] In this exemplary implementation, receiver 1 1 0 is configured to provide a user a 
time frame to leave and come back without initiating the process of determining a new access 
rights level for the audience and content control determination. For example, a user watching a 
program may temporarily leave the vicinity or region where the content is outputted (e.g., a 
recreation room) to go to the kitchen to grab some food. 

[0150] FIG. 1 6 is a flowchart of an exemplary process 1 600 by which an access rights 
level for an audience of one or more detected users may be updated based on a position or 
location of the one or more detected users. The process 1600 will be described with reference to 
the operational environment shown in FIG. 1. Such an implementation may be employed where 
longer range wireless communications (such as beyond a consumption region(s)) is employed 
between receiver 1 10 and WCDs 120. 

[0151] At step 1 602, receiver 110 determines a location of one or more detected users. 
This may be performed via GPS system or other well known position determining algorithm 
(e.g., by signal strength). At step 1604, receiver 110 determines whether a location of one or 
more of the detected users exceeds a threshold distance or is outside a content consumption 
range. If not, receiver 110 continues to provide access to content as if the user did not leave at 
step 1606. Otherwise, the process 1600 proceeds to step 1608 in which receiver 110 determines 
updated access rights level for the remaining detected user(s) and updates restriction on content 
based on the updated access rights level at step 1610. 

[0152] FIG. 1 7 is a flowchart of an exemplary process 1 700 by which an access rights 
level for an audience of one or more detected users may be updated based on a position or 
location of the one or more detected users. The process 1700 will be described with reference to 
the operational environment shown in FIG. 1 . Such an implementation may be employed where 
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longer range wireless communications (such as beyond a consumption region(s)) is employed 
between receiver 110 and WCDs 120. 

[0153] At step 1 702, receiver detects a new user. 

[0154] At step 1704, receiver 110 determines a location of the newly detected user. This 
may be performed via GPS system or other well known position determining algorithm (e.g., by 
signal strength). At step 1706, receiver 110 determines whether a location of the new detected 
user exceeds a threshold distance or is outside a content consumption range. If so, receiver 110 
continues to provide access to content based on the current access rights level of the audience of 
one or more detected users. Receiver 110 may continue to track the position of the new detected 
user to determine whether the user is within a distance threshold or consumption range, for 
example, until it is apparent that the user does not intend to consume or is not capable of 
consuming content. Such an indication of intent or incapability may be determined by the user's 
device being turned off, the user's position exceeding a second distance threshold or range, the 
expiration of a time period, and so forth. 

[0155] Otherwise, if the user is within a distance threshold or a consumption range, then 
receiver 110 determines updated access rights level for the remaining detected user(s) at step 
1710 and updates restriction on content based on the updated access rights level at step 1712. 

[0156] FIG. 1 8 is a flowchart of an exemplary process 1 800 by which a content guide is 
processed based on an access rights level for one or more users. The process 1800 may be 
implemented by receiver 1 10 or device 210 in the operational environments shown in FIGS. 1 
and 2. The process 1800 will be discussed below with reference to FIG. 10. 

[0157] At step 1 802, a content guide is received from a content manager or provider and 
stored. The content guide may be unfiltered and may include a plurality of items classifying 
content (e.g., Category, Subcategory, Services, etc.) and being arranged in a parent-child 
hierarchy based on access rating such as shown and described above with reference to FIG. 10. 

[0158] At step 1 804, an access rights level for an audience of one or more users is 
obtained. 
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[0159] At step 1806, a non-processed item from the guide is processed. At step 1808, a 
determination is made whether the access rights level of the audience is suitable or unsuitable for 
accessing the item. The suitability of an item may be based on a comparison of the access rights 
level of the audience to an access rating of an item. 

[0160] If the item is deemed unsuitable for the audience, then the item is discarded as a 
receivable selection and any children items related to that item is not processed at step 1810. At 
step 1812, a determination is made whether anymore items need to be processed. If so, the 
process 1800 proceeds back to step 1806 with the selection of a non-processed item from the 
guide for processing. If there are no more items to be processed, the process 1800 proceeds to 
step 1818 to await any user selection of an item. 

[0161] If the item is deemed suitable for the audience, then the item and its related 
children items may be processed and an indication of the availability of the item and children 
items for selection may be outputted for selection or searched at step 1814. At step 1816, a 
determination is made whether anymore items need to be processed. If so, the process 1800 
proceeds back to step 1806 with the selection of a non-processed item from the guide for 
processing. If there are no more items to be processes, the process 1800 proceeds to step 1818 to 
await any user selection of an item. 

[0162] Although the above describes one example of filtering implementation of a 
content guide structured according to hierarchical rules such as in FIG. 10, other content guide 
formats with or without rules may likewise be filtered according to access rights level of the 
audience. 

[0163] FIG. 1 9 is a flowchart of an exemplary process 1 900 by which a content guide is 
modified or updated. The process 1900 may be implemented by content provider 140 in the 
operational environments shown in FIGS. 1 and 2. The process 1900 will be discussed below 
with reference to the content guide of FIG. 10. 

[0164] At step 1902, a content guide is generated and/or maintained in a remote or local 
storage facility for distribution. 
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[0165] At step 1 904, an update request or operation is received to update or modify the 
content guide. The update or modification may include adding a new item(s) (e.g., new content 
offering, new category, new subcategory, new channel, new service, new program, etc.), deleting 
an item(s), changing item information such as an access rating, reclassifying items and 
relationships between items, and so forth. 

[0166] At step 1 906, a determination is performed as to whether the update request or 
operation is consistent with hierarchy rules, for example that an access rating of a child item may 
not exceed that of its parent item. If the update request or operation is inconsistent or violates 
the hierarchy rules, then the update request or operation is not performed at step 1908. 
Otherwise, if consistent or valid, the content guide is updated per the update request or operation. 

[0167] FIG. 20 is a flowchart of an exemplary process 2000 by which a user's access 
rights level is updated or set. The process 2000 may be implemented by a device or system, such 
as receiver 110, WCD 120 and/or device 210 in the operational environments shown in FIGS. 1 
and 2. 

[0168] The process 2000 begins with the initiation of operations to add or modify or set 
an access rights level for a user. 

[01 69] At step 2002, verification information is received such as a password, personal 
identification number (PIN) or other codes. At step 2004, a determination is made as to the 
validity of the verification information. If invalid, an access rights level may not be added, 
modified or set. If valid, the process 2000 continues and an access rights level may be added, 
modified or set at step 2006. A selection of access rights levels may be provided to a user. This 
selection may be graphical such as a pull down box listing the available right level choices (e.g., 
0-21 years old, Adult, Violence, level 1 through level 10, etc.). Other graphical elements or 
input mechanisms may be employed to output the selection and receive access rights level 
information. 

[0170] At step 2008, the device performs the addition, modification or setting of access 
rights level accordingly. For example, an access rights database may be updated with the 
received access rights level (e.g., update of user access right profiles) or the device such as 
devices 120 and 210 may be set to operate at the received access rights level (e.g., selection of an 
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access right profile for a device). Thereafter, access to content may be implemented in 
accordance with the various access control implementations herein according to the received 
access rights level for the device. 

[0171] FIG. 2 1 is a flowchart of an exemplary process 2 1 00 by which content is encoded 
(or embedded) with access rating information. The process 2100 may be implemented by 
content provider 140 in the operational environments shown in FIGS. 1 and 2 such as via 
terminal 150. 

[0172] At step 2102, content is provided for access rating encoding. The content is 
generated and maintained at storage facility for access and encoding. 

[01 73] At step 2104, content is encoded with an electronic watermark to set copyright 
information and/or access rating to produce controlled content. Various watermarking 
technologies such as those already employed in setting a copyright watermark may be employed 
to encode content with access rating information. Other information may be encoded with the 
electronic watermark technology to facilitate access control implementations herein. 

[01 74] At step 2106, the controlled content is thereafter distributed or delivered for 
eventual consumption by a user. For example, content provider 140 may distribute such 
controlled content to receiver 1 10 or device 210 for consumption, across various transmission 
mediums such as by broadcast, multicast or peer-to-peer. 

[0175] The above describes one example of how content may be encoded with an access 
rating. Other approaches may be employed to encode content with access rating information, as 
desired. 

[0176] FIG. 22 is a flowchart of an exemplary process 2200 by which content encoded 
(or embedded) electronic watermark indicating access rating may be employed to provide access 
control over content. The process 2200 may be implemented by device or system, such as 
receiver 110 and device 210 in the operational environments shown in FIGS. 1 and 2. 

[0177] At step 2202, access rights level of a device is set or determined. For example, in 
the environment of FIG. 1, receiver 1 10 determines an access rights level for one or more 
detected users. In the environment of FIG. 2, device 210 sets the access rights level according to 
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a profile of a current user via a login procedure or other procedure. Setting of access rights level 
can be protected with a password or equivalent. For example, entering of PIN2 code of the 
device 210 can be required to change the level. 

[0178] At step 2204, controlled content is received such as from content provider 140. 
The controlled content may include electronic watermark set with access rating along with, if 
desired, copyright or other information. 

[0179] At step 2206, the controlled content is processed to decode and read the electronic 
watermark to determine an access rating of the content. 

[0180] At step, 2208, a determination is made whether the content is suitable for 
consumption according to the access rights level and access rating of the content. If not, 
consumption and access of the content is restricted. Otherwise, if suitable, the content may be 
accessed and consumed. 

[0181] Additionally it is possible in some embodiments of the present invention that an 
access rights level is a user-specific character in which case a user may logout in order to 
neutralize the access right level and login by setting the level in order to consume contents. 

[0182] FIG. 23 illustrates a flowchart of an exemplary short-range encounter 2300 
between two devices, such as a receiver 110 and WCD 120 of FIG. 1, employing Bluetooth 
communications. This encounter begins with a step 2302 in which the WCD enters a region such 
as a communicating range with the receiver. 

[0183] Next, in a step 2304, the receiver and the WCD engage in an inquiry process. In 
this step, the receiver learns the identity (or discovers the existence) of the WCD. In Bluetooth 
implementations, the receiver operates in an inquiry state while the WCD operates in an inquiry 
scan state. When operating in the inquiry state, the receiver transmits an inquiry packet and the 
WCD listens for inquiry packets. 

[0184] When the WCD receives the inquiry packet from the receiver, it transmits one or 
more frequency hop synchronization (FHS) packets, which are received by the receiver. The 
FHS packet(s) allow the receiver to become synchronized with the hop sequence of the WCD. 
In addition, the FHS packet(s) enable the receiver to derive information necessary to make a 
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Bluetooth connection with the WCD. This information includes the native clock of the WCD 
(CLKN), the WCD's Bluetooth address (BDADDR), and error correction coding information. 

[0185] In a step 2306, the receiver and the WCD engage in a paging process. During the 
paging process, the receiver invites the WCD to join an ad hoc network. Upon successful 
completion, the paging process results in an unsecured connection being established between the 
receiver and the WCD. In Bluetooth implementations, step 2306 comprises the exchange of 
various information between the receiver (which is in a paging state) and the WCD (which is in a 
page scan state). 

[0186] More particularly, the receiver enters the paging state and transmits one or more 
paging packets. These paging packets each include an identification number based on the 
address of the WCD. Meanwhile, the WCD (which is in the page scan state) responds to the 
paging packets by transmitting a packet containing its address. 

[0187] The receiver receives this packet from the WCD. In response, the receiver 
transmits a frequency hop synchronization (FHS) packet. The FHS packet is used to pass 
information that allows the WCD to synchronize with the frequency hopping sequence of the 
receiver. Upon receipt of this FHS packet, the WCD transmits a further packet to confirm 
receipt of the FHS packet. 

[0188] At this point, a link is formed between the receiver and the WCD and both 
devices enter into a connection state. In the connection state, the receiver operates as a master 
device and the WCD operates as a slave device. Thus, the WCD employs the timing and 
frequency hopping sequence of the receiver. Additionally, the receiver transmits a packet to 
verify that a link has been set up. The WCD confirms this link by sending a packet to the 
receiver. In this example, the receiver is the master and the WCD is the slave. 

[0189] At step 2308, the receiver obtains an access rights level associated with the user 
or the user's WCD, such as using the BD_ADDR, to access an access rights database. This 
database may contain access rights level for a plurality of BD ADDRs or the like. The database 
may be stored locally or at an access remote location as desired. 
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[0190] If security is desired, the receiver may require additional verification, (such as 
PIN input) from the WCD, such as at step 2310. The verification process may involve additional 
paging and connection set-up steps. 

[0191] Thereafter, at step 23 1 2, access control may be implemented in the various 
aspects as described herein. 

[0192] FIG. 24 is a flowchart of an exemplary short-range encounter 2400 between two 
devices, such as such as a receiver 110 and WCD 120 of FIG. 1, employing at least RFID 
technology. This encounter begins with a step 2402 in which the WCD with a RFID tag enters a 
region such as a communicating range with a RFID reader associated with the receiver. 

[0193] Next, in a step 2404, identification information, such as a user ID, is provided 
from the RFID tag of WCD to the RFID reader of the receiver. Additional information, such as 
an access rights level, may also be transmitted from the tag. The RFID tag may be an active tag 
or a passive tag, as discussed above in the RFID section. 

[0194] At step 2406, the receiver obtains the access rights level associated with the user 
or the user's WCD from the RFID tag or from an access rights database using the user ID. This 
database may contain access rights level for a plurality of user Ids or the like. The database may 
be stored locally or at an access remote location as desired. 

[0195] If security is desired, the receiver may require additional verification, (such as 
PIN input) from the WCD, such as at step 2408. A remote controller may be used for to input 
PIN for user by the receiver or, alternatively, a second communications link may be established 
between the devices to transmit such information. The second communications link may be a 
Bluetooth link or any other communications link or channel suitable for communicating data. 

[0196] Thereafter, at step 2410, access control may be implemented in the various 
aspects as described herein. 



IX. CONCLUSION 

[0197] While various embodiments of the present invention have been described above, 
it should be understood that they have been presented by way of example only, and not in 
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limitation. For instance, although examples have been described involving Bluetooth and RFID 
and generally WLAN technologies, other shorter-range and longer range communications 
technologies are within the scope of the present invention. Although access control schemes 
over content have been described involving set top boxes or wireless terminals other network or 
communications arrangements are also within the scope of the present invention. The access 
control implementations herein may also be implemented in hardware, software, firmware, or 
any combination thereof. 

[0198] Accordingly, it will be apparent to persons skilled in the relevant art that various 
changes in form and detail can be made therein without departing from the spirit and scope of the 
invention. Thus, the breadth and scope of the present invention should not be limited by any of 
the above-described exemplary embodiments, but should be defined only in accordance with the 
following claims and their equivalents. 
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